IRTS OP5 Monitor - Cross-Site Scripting

OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting XSS. id: CVE-2021-40272 info: name: IRTS OP5 Monitor - Cross-Site Scripting author: ritikchaddha severity: medium description: | OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting XSS. impac...

ITRS OP5 Monitor command_test.php patch bypass RCE

Authenticated monitor/monitor → CSRF → commandtest.php $ injection with base64 output retrieval. !/usr/bin/env python3 -- coding: utf-8 -- """ITRS OP5 Monitor commandtest.php authenticated command injection RCE.""" from future import annotations import base64 import re from urllib.parse import...

ITRS OP5 Monitor — CVE-2025-34115 Patch Bypass: Opt-In Sanitization Leaves Authe — Detect

Fingerprint / reachability check for ITRS OP5 Monitor — CVE-2025-34115 Patch Bypass: Opt-In Sanitization Leaves Authenticated Command Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for ITRS OP5 Monitor — CVE-2025-34115 Patch Bypass: Opt-In Sanitization Leaves Authenticated...

OP5 Monitor CVE-2025-34115 Detect

Detects OP5 Monitor / ITRS login surface. !/usr/bin/env python3 -- coding: utf-8 -- """Detects OP5 Monitor / ITRS login surface.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "OP5 Monitor CVE-2025-34115 Detect",...

OP5 Monitor CVE-2025-34115 command_test RCE

CVE-2025-34115 bypass: authenticated cmdstr on /monitor/op5/nacoma/commandtest.php runs $... via naemon shell mode. !/usr/bin/env python3 -- coding: utf-8 -- """ITRS OP5 Monitor CVE-2025-34115 patch-bypass commandtest RCE.""" from future import annotations import base64 import re from kittysploit...

PT-2026-91879

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

EUVD-2008-5006

Malware in sbrugna...

EUVD-2012-0299

Malware in sbrugna...

EUVD-2013-5970

Malware in sbrugna...

EUVD-2008-5007

Malware in sbrugna...

EUVD-2012-0300

Malware in sbrugna...

EUVD-2025-21432

Malicious code in bioql PyPI...

CVE-2025-34115

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

CVE-2025-34115

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

CVE-2025-34115

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

CVE-2025-34115 OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

CVE-2025-34115

OP5 Monitor

CVE-2025-34115 OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

CVE-2025-34115: Improper Neutralization of Special Elements used in an OS Command

An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmdstr' parameter in the commandtest.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web...

PT-2025-29556

Name of the Vulnerable Software and Affected Versions OP5 Monitor versions through 7.1.9 Description An authenticated command injection vulnerability exists in OP5 Monitor. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as t...